CVE-2026-19336

A vulnerability was found in Pimzino spec-workflow-mcp up to 2.2.6. This issue affects the function ApprovalStorage.createApproval of the file src/tools/approvals.ts. Performing a manipulation of the argument categoryName results in path traversal. The attack is only possible with local access...

CVE-2026-19336 Pimzino spec-workflow-mcp approvals.ts ApprovalStorage.createApproval path traversal

A vulnerability was found in Pimzino spec-workflow-mcp up to 2.2.6. This issue affects the function ApprovalStorage.createApproval of the file src/tools/approvals.ts. Performing a manipulation of the argument categoryName results in path traversal. The attack is only possible with local access...

CVE-2026-19336

Pimzino spec-workflow-mcp (up to 2.2.6) contains a path traversal vulnerability in ApprovalStorage.createApproval (src/tools/approvals.ts) triggered by manipulating categoryName. Exploitation requires local access. A fix is available in version 2.2.7; the patch is tracked as 9c7a7839e690bb4543f0e...

PT-2026-69260

Name of the Vulnerable Software and Affected Versions Pimzino spec-workflow-mcp versions prior to 2.2.7 Description A path traversal issue exists in the ApprovalStorage.createApproval function within the src/tools/approvals.ts file. This occurs when the categoryName argument is manipulated,...

CVE-2026-19336: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in Pimzino spec-workflow-mcp up to 2.2.6. This issue affects the function ApprovalStorage.createApproval of the file src/tools/approvals.ts. Performing a manipulation of the argument categoryName results in path traversal. The attack is only possible with local access...